Inconsistency with Nautilus drag&drop and ACL

[Holger Berndt]

Binary package hint: nautilus

I am using Nautilus in connection with Eiciel for ACL support (what is the status of Nautilus' native ACL support anyways? I heard it should be there from GNOME 2.16 on...). When I copy a directory with files from a partition that was not mounted with acl support, file permissions differ depending on whether I do this copy operation from a shell (cp -r) or via Drag&Drop in Nautilus. In my oppinion, the file permissions via the shell command are more sensible.

----------------------------------
Permissions of the source directory (not mounted with ACL support)
hb@wodan:~$ getfacl .
# file: .
# owner: hb
# group: hb
user::rwx
group::r-x
other::r-x

----------------------------------
Permissions of the target directory (mounted with ACL support)
hb@wodan:~$ cd /var/pictures/
hb@wodan:/var/pictures$ getfacl .
# file: .
# owner: root
# group: pictures
user::rwx
group::rwx
other::---
default:user::rwx
default:group::rwx
default:mask::rwx
default:other::---

----------------------------------
Permissions of a subdirectory and a file in the subdirectory of the target directory (mounted with ACL support) that has been copied via the shell
hb@wodan:/var/pictures$ getfacl copy_s #this is a directory
# file: copy_s
# owner: hb
# group: pictures
user::rwx
group::rwx #effective:r-x
mask::r-x
other::---
default:user::rwx
default:group::rwx
default:mask::rwx
default:other::---

hb@wodan:/var/pictures$ getfacl copy_s/copy_s # this is a file
# file: copy_s/copy_s
# owner: hb
# group: pictures
user::rw-
group::rwx #effective:r--
mask::r--
other::---

----------------------------------
Permissions of a subdirectory and a file in the subdirectory of the target directory (mounted with ACL support) that has been copied via Nautilus Drag&Drop
hb@wodan:/var/pictures$ getfacl copy_n
# file: copy_n
# owner: hb
# group: pictures
user::rwx
group::rwx #effective:r-x
mask::r-x
other::r-x
default:user::rwx
default:group::rwx
default:mask::rwx
default:other::---

hb@wodan:/var/pictures$ getfacl copy_n/copy_n
# file: copy_n/copy_n
# owner: hb
# group: pictures
user::rw-
group::rwx #effective:r--
mask::r--
other::r--

----------------------------------------------------------------------------------------------------

Note how the permissions of "other" differ. I very much prefer them the way the shell does it. Since Nautilus is granting unwanted read access for world, I am marking this bug as a security vulnerability.

[Pedro Villavicencio (pedro)]

Thanks for your report, feel free to forward it upstream to bugzilla.gnome.org since you're facing the issue and known Eiciel better to response to the question upstream will do it. thanks.

[Holger Berndt (berndth)]

Submitted upstream (Bug #504049 in GNOME bugzilla)

[Pedro Villavicencio (pedro)]

thanks a lot, linking the report now.

[logari81 (logari81)]

I created a patch fixing this issue. I have also submitted it upstream:
http://bugzilla.gnome.org/show_bug.cgi?id=549437
would be nice to see it in jaunty.

[logari81 (logari81)]

oops... ignore my last post, obviously I had posted it in the false thread.

[Victor Vargas (kamus)]

Since this report have a long time without activity, please could you check if this issue is still affecting you under latest release included in Ubuntu Lucid? Thanks in advance.

[rusivi2 (rusivi2-deactivatedaccount)]

We'd like to figure out what's causing this bug for you, but we haven't heard back from you in a while. Could you please provide the requested information? Thanks!

[Pascal S (pascal.s)]

Why is this bug assigned to https://bugzilla.gnome.org/show_bug.cgi?id=549437 ?
It should be assigned to https://bugzilla.gnome.org/show_bug.cgi?id=504049. As far as I know, bug is still present in Ubuntu 11.04.